WLP: Adicionando um certificado TLS como confiável na Liberty trust store: Difference between revisions
No edit summary |
|||
Line 12: | Line 12: | ||
3) Removendo caso já exista | 3) Removendo caso já exista | ||
<IHS_HOME>/java/8.0/jre/bin/java com.ibm.gsk.ikeyman.ikeycmd -cert -delete -db "<wlp_root>/usr/servers/defaultServer/resources/security/key.jks" \ | <small><IHS_HOME>/java/8.0/jre/bin/java com.ibm.gsk.ikeyman.ikeycmd -cert -delete -db "<wlp_root>/usr/servers/defaultServer/resources/security/key.jks" \ | ||
-pw <PASSWORD> -label <LABEL_CERTIFICADO> > /dev/null | -pw <PASSWORD> -label <LABEL_CERTIFICADO> > /dev/null</small> | ||
4) Salvando no key store do Liberty | 4) Salvando no key store do Liberty | ||
<IHS_HOME>/java/8.0/jre/bin/java com.ibm.gsk.ikeyman.ikeycmd -cert -add -db "<wlp_root>/usr/servers/defaultServer/resources/security/key.jks" \ | <small><IHS_HOME>/java/8.0/jre/bin/java com.ibm.gsk.ikeyman.ikeycmd -cert -add -db "<wlp_root>/usr/servers/defaultServer/resources/security/key.jks" \ | ||
-file "<wlp_root>/usr/servers/defaultServer/resources/security/NOME_DO-ARQUIVO.cer" \ | -file "<wlp_root>/usr/servers/defaultServer/resources/security/NOME_DO-ARQUIVO.cer" \ | ||
-pw <PASSWORD> -label <LABEL_CERTIFICADO> > /dev/null | -pw <PASSWORD> -label <LABEL_CERTIFICADO> > /dev/null</small> | ||
= Ver também = | = Ver também = |
Revision as of 19:41, 7 October 2019
Procedimento
1) Vá ao diretório do Liberty
cd <wlp_root>/usr/servers/defaultServer/resources/security
2) Download do certificado
openssl s_client -connect <HOST:PORT> </dev/null | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > <NOME_DO-ARQUIVO.cer>
3) Removendo caso já exista
<IHS_HOME>/java/8.0/jre/bin/java com.ibm.gsk.ikeyman.ikeycmd -cert -delete -db "<wlp_root>/usr/servers/defaultServer/resources/security/key.jks" \ -pw <PASSWORD> -label <LABEL_CERTIFICADO> > /dev/null
4) Salvando no key store do Liberty
<IHS_HOME>/java/8.0/jre/bin/java com.ibm.gsk.ikeyman.ikeycmd -cert -add -db "<wlp_root>/usr/servers/defaultServer/resources/security/key.jks" \ -file "<wlp_root>/usr/servers/defaultServer/resources/security/NOME_DO-ARQUIVO.cer" \ -pw <PASSWORD> -label <LABEL_CERTIFICADO> > /dev/null